Discussion Locked

AD Issue

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How do you set a user to have administrator rights on their local machine, when you are logging in through Active Directory? I don't want to give them administrator rights on the server. Any ideas??
Thanx in advance.

6 replies

by beaudoin

Log on to that machine with local admin rights, and put his domain account in the local administrator group.

by lordinfidel

On *your* 2k Machine, log in as a domain admin.

Right click on my computer and choose "Manage"

When the snap-in comes up, right click on your computer managemnt (local) and select "Connect to another computer"

Browse to his system, and add his domain account into the local admin group.

Have him log off and log back on and you are done.

There's nothing like central administration.

by cliff680

The problem is, I'm using an XP workstation and when I go to add the domain user, I can't select from the domain, only from the local machine. I know that there has to be a way to select the domain, I just can't figure it out. Any ideas?

by cliff680

Actually I figured it out, you need to go to User Accounts in Control Panel and there you can add a domain user to the local administrators group.

by lordinfidel

If you are a domain admin, you should be able to manage everyone's 2k/xp box remotely.

I know it can be done because I do it all of the time. I don't like to leave my NOC and go trampsing across the building to give people rights to something. I just do it remotely by choosing their system to manage.

If you have the admin tools installed on your machine. Then you can use AD users and computers, navigate to their computer name, right click and choose manage.

This discussion is closed to new replies.